sf-datacloud-segment
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various Salesforce CLI commands using the
sf data360plugin to list, create, and publish segments and calculated insights. - [COMMAND_EXECUTION]: Executes a local Node.js script located at
~/.claude/skills/sf-datacloud/scripts/diagnose-org.mjsto perform readiness checks on the target Salesforce organization. - [EXTERNAL_DOWNLOADS]: Dependencies include an external community-developed CLI plugin (
sf data360) which must be present in the user's environment. - [COMMAND_EXECUTION]: Provides the capability to run SQL queries directly against Salesforce Data Cloud using the
sf data360 query sqlcommand. - [PROMPT_INJECTION]: The skill processes untrusted user-provided data such as segment names, SQL queries, and JSON definition files which are interpolated into CLI commands.
- Ingestion points: User-defined segment names, SQL strings, and local JSON files (
segment.json,ci.json) in SKILL.md. - Boundary markers: None explicitly defined in the prompt templates to delimit user input from instructions.
- Capability inventory: Execution of shell commands via
sfCLI andnodescript, including database query capabilities. - Sanitization: No evidence of input validation or sanitization before passing parameters to command-line tools.
Audit Metadata